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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

I) ^ Responsive to communication(s) filed on 30 August 2007 . 
2a)D This action is FINAL. 2b)S This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
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4) ^ Claim(s) 13-5,7 and 9 is/are pending in the application. 
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5) D Claim(s) is/are allowed. 

6) 13 Claim(s) 1.3-5.7 and 9 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) Q Claim(s) are subject to restriction and/or election requirement. 
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Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
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* See the attached detailed Office action for a list of the certified copies not received. 
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Response to Arguments 
Applicant's arguments with respect to claims 1,3-5,7 and 9 have been considered but are 
moot in view of the new ground(s) of rejection. Applicant has filed an RCE 8/30/07. 

Priority 

Receipt is acknowledged of papers submitted under 35 U.S.C. 1 19(a)-(d), which papers 
have been placed of record in the file. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on ■ 
sale in this country, more than one year prior to the date of application for patent in the United States. 

Claims 1,3-5,7 and 9 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Weissman (U.S. Patent Application Publication 2002/01 56905). 

For claim 1, Weissman teaches, method for accessing Internet resources provided by at 
least a content server in a data transmission system including an HTTP proxy connected to the 
Internet network, said HTTP proxy being adapted to perform form-based authentication of a user 
when receiving a user request for Internet resources therefrom, and wherein said proxy transmits 
the user request to said content server which sends back a response to the proxy; said method 
comprising: (Weissman, paragraph 25, authentication, paragraph 23, portal) 
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receiving a user request from a user for Internet resources at an HTTP 
proxy; (Weissman, paragraph 22, HTTP GET) 

transmission from said proxy to a Single Sign On (SSO) server of said user 
request together with credentials associated with said user, wherein said SSO server is external to 
and accessible via the Internet to said HTTP proxy; (Weissman, paragraph 22, single sign-on, 
paragraph 25authentication, 26, URL, domain) 

obtaining by the SSO server a login form from the content server, wherein said 
SSO server has at its disposal a configuration file for obtaining and filling said login form, said 
configuration file providing information about said content server; (Weissman, paragraph 25, 
logon database) 

filling by said SSO server of the login form obtained from said content server, 
said login form being filled by the SSO server using said credentials; (Weissman, paragraph 20, 
logon procedure) 

transmission from the SSO server to the content server of the filled login form; 
(Weissman, paragraph 20 logon procedure) 

transmission by said content server to said SSO server of an HTTP response to 
said user request after the content server receives the filled login form from said SSO server; 
(Weissman, paragraph 23, forward webpage to client) 

sending of the HTTP response back to the HTTP proxy by the SSO server; 
(Weissman, paragraph 23, portal) 
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and transmission by said HTTP proxy of the requested information to said user, 
said information being contained in said HTTP response; (Weissman, paragraph 22 HTTP 
message) 

wherein the subsequent user requests are forwarded directly from the HTTP proxy 
to the content server, and HTTP responses to the subsequent user request are transmitted directly 
to the proxy by the content server, without going through the SSO server. (Weissman, paragraph 
32, currently logged in) 

For claim 3, Weissman teaches, method according to claim 2, wherein the configuration file 
includes information including at least one of an URL of a login page, a location of said login 
page, a name of an input field used for a username and a name of an input field used for a 
password. (Weissman, paragraph 25 authentication, paragraph 26 URL, domain) 

For claim 4. Method according to claim 2, wherein said HTTP response from said content server 
sent back to said HTTP proxy includes at least one cookie specific to said content server. 
(Weissman, paragraph 23, cookie) 

For claim 5. Method according to claim 1, further comprising an initial step of transmitting by 
said user a first request to said HTTP proxy invoking an external URL configured in said HTTP 
proxy, said HTTP proxy sending back an authentication challenge to said user in order to verify 
the user credentials and checking whether the user credentials correspond to a valid user. 
(Weissman, paragraph 20, logon procedure) 
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For claim 7. Data transmission system including a HTTP proxy connected to the Internet 
network and a content server to which a user can gain access through said HTTP proxy, said 
HTTP proxy being associated with authentication means adapted to perform form-based 
authentication of the user when receiving a user request for Internet resources therefrom and 
wherein said HTTP proxy transmits the user request to said content server which sends back a 
HTTP response to said HTTP proxy; said authentication means comprising: (Weissman, 
paragraph 23 portal, paragraph 22, HTTP GET) 

a Single Sign-On (SSO) server adapted to receive from the HTTP proxy a user request 
and credentials associated with the user, to obtain a login form from said content server when 

4 

receiving said user request from said HTTP proxy, to fill said login form using the credentials 
associated with said user and to send back the filled login form to said content server, so that said 
content server can provide the requested information to the HTTP proxy after authentication of 
said user, wherein said SSO server has at its disposal a configuration file for obtaining and filling 
said login form, said configuration file providing information about said content server such as 
the URL of the login page, wherein said SSO server is external to and accessible via the Internet 
to said HTTP proxy; (Weissman, paragraph20 logon procedure, paragraph 22, single sign-on, 
paragraph 25authentication, 26, URL, domain) 

wherein subsequent user request are forwarded directly from the HTTP proxy to 
the content server, and a HTTP responses to the subsequent user request are transmitted directly 
to the HTTP proxy by the content server, without going through the SSO server. (Weissman, 
paragraph 32, currently logged in) 
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For claim 9. Data transmission system according to claim 8, wherein the configuration file 
includes information including at least one of an URL of a login page, a location of said login 
page, a name of an input field used for a username and a name of an input field used for a 
password. (Weissman, paragraph 25 authentication, paragraph 26 URL, domain) 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See attached Notice of references cited (if appropriate). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ajay M. Bhatia whose telephone number is (571)-272-3906. The 
examiner can normally be reached on M-F 8:30 am - 5:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jason Cardone can be reached on (571)272-3933. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 



1 * 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




Jason Cardone 
Supervisor Patent Examiner 
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